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IN THE CLAIMS: 



Please amend claims 1-2, 7-8 and 12 as follows: 



comprising: 



client; 



client; 



1 . (Currently amended) A method of providing key management 
providin > a server; 

providin \ a client configured to be coupled to said server; 
providing a trusted third party configured to be coupled to said 

generating a trigger message at said server; 

generating a nonce at said server; 

allowing said server to initiate a key management session with said 

utilizing said nonce coupled with said trigger message. 



2. (Currently amehded) The method as described in claim 1 wherein 
said allowing said server to initiate said key management session with said client 
comprises: 

gonoratingi a trigg e r messag e at Gaid serv e r; 

gen e rating la nonc e at said s e rv e r; 

conveying said trigger message and said nonce to said client. 

3. (Original) Thelmethod as described in claim 2 and further comprising: 

receiving said trigger message and said nonce at said client; 
generating alresponse message to said trigger message; 
conveying said response message and a returned_nonce to said 



server. 



4. (Original) The niethod as described in claim 3 and further comprising: 
predetermining an out-of-bounds value for said nonce to prevent 
an attacker from simulating a client iiritiated key management session; 



# 
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checking said nonce to determine whether the value of said nonce 
is said out-of-bounds value. 

5. (Original) I The method as described in claim 3 and further comprising: 

confirming the value of said returned_nonce at said server; and 
conveying a reply message from said client to said server. 

6. (Original) The method as described in claim 1 and further comprising: 

receiving from said client a response message and a false_nonce at 

said server; 

determining that said false_nonce is false; 
disregarding said client response message. 

7. (Currently amended) A method of providing key management in a 
Kerberos based system, said method comprising: 

providing a server; 

providing W client configured to be coupled to said server; 

providing a key distribution center configured to act as a trusted 
third party for said client and said server; 

generating alnonce at said server; 
conveying said trigger message and said nonce to said client; 

initiating a key management session by said server with said client 
by utilizing said nonce coupled witmsaid trigger message . 

8. (Currently amende^) The method as described in claim 7 and 
further comprising: 

generating a trigg e r m e ssage at said s e rv e r; 

gen e rating a nonc e at said s e rv e r; 

conveying said trigger message and said nonce to said client. 

9. (Original) The method as described in claim 8 and further comprising: 

receiving said trigger message and said nonce at said client; 
generating a response message to said trigger message; 
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convening said response message and a returned_nonce to said 



server. 



10. (Original) 
confir 



le method as described in claim 9 and further comprising: 
ig the value of said returned_nonce at said server; and 



then 



said client; 



continuing with said key management session. 
1 1 . (Original) Thfe method as described in claim 7 and further comprising: 
receiving a\ said server a response message and a false_nonce from 

determininglthat said false_nonce does not match said nonce; 
determining that said server did not initiate said key management 



session. 



12. (Currently amended) A method of initiating a key management 
session for a cable telephony adaptel (CTA) (CTA. and a Signaling Controller in an IP 
Telephony network, the method comprising: 

providing said Signaling Controller; 

providing said OA configured to be coupled to said Signaling 



Controller; 



CTA; 



providing a key distribution center fKDC) (KDC ; 

generating a trigger message at said Signaling Controller; 

generating a nonce at said Signaling Controller; 

coupling said nonae with said trigger message; 

transmitting said nonce coupled with said trigger message to said 

generating a response message to said trigger message; 
using the value of said nonce as the value of a returned_nonce; 
coupling said response message with said returned_nonce; 
transmitting said retui\ied_nonce and said response message to said 



Signaling Controller; 
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Controller, 
comprising: 



comparing said returned_nonce to said nonce; 
transmitting an AP reply in reply to said response message; 
transmitting an S A recovered message to said Signalling 

13. (Original) A method of conveying a key from a server to a client, 

generating a wakeup message at said server; 

generating! a server_nonce at said server; 

conveying said wakeup message and said nonce to said client; 

generating an AP request message at said client; 

conveying aiclient_nonce and said AP request message to said 



server; 



com 



ifirming that said client_nonce conveyed with said AP request 
message matches said server_nonce\generated at said server; 

14. (Original) A method of confirming that a message received by a 
server from a client was triggered by the server: 

receiving an AH request message from said client; 
receiving a client_nonce from said client wherein said client_nonce 
is associated with said AP request; 

determining whemer said client_nonce matches a nonce conveyed 



from said server. 



15. (Original) The method as described in claim 14 and further 



comprising: 



determining that saia client_nonce does not match said nonce 
conveyed from said server; and 

disregarding said AP request. 
16. (Original) The method ad described in claim 15 and further 

comprising: 



• 
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awaiting 

request; 

aborting 

if no reply is received from saic 



at said client for a reply from said server to said AP 



said AP request session after a predetermined time period 
server. 



17. (Original) The method as described in claim 14 and further 



comprising: 



determining that said client_nonce does match said nonce 
conveyed from said server; and 

generatir g an AP reply at said server to said AP request. 

18. (Original) A system for providing key management in a Kerberos 
based system, said system comprising 

a server; 

a client configured to be coupled to said server; 

a key disi ribution center configured to act as a trusted third party 
for said client and said server; 

computer bode coupled to said server operable to initiate a key 
management session by said server with said client. 

19. (Original) The system as described in claim 18 wherein said computer 
code operable to initiate a key management session comprises computer code operable to 
generate a trigger message at said server; and further comprising: 

computer cqde coupled to said server operable to generate a nonce 

at said server; 

computer code coupled to said server operable to convey said trigger 
message and said nonce to said client. 

20. (Original) The system as described in claim 19 and further 

comprising: 

computer codel coupled to said client operable to generate a 
response message to said trigger message; 
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computer code coupled to said client operable to convey said 
response message and aireturned_nonce to said server. 

21. (Original) The system as described in claim 20 and further 

comprising: 

computer code coupled to said server operable to confirm the value 



